Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File:                     9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier:          ZmH2btoLTbqyoc/+C7fZAbjRBg6dOHJcK65+UfNKuNU=
Subject key identifier:   0A:E4:CF:92:91:6C:0B:EB:1A:45:30:76:87:B5:28:36:DF:FB:50:44
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer:       /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial:       018F188F918327D191053BC320ED990F931E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number:          10D1
Signing time:             Fri 26 Apr 2024 04:00:13 +0000
Manifest this update:     Fri 26 Apr 2024 04:00:13 +0000
Manifest next update:     Sat 27 Apr 2024 04:00:13 +0000
Files and hashes:         1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: TuEzZPatb161S54uH3Ja0eAJ7cBCBu0bDIljrxMrQaw=)
                          2: uVZdSHbnmnk8Ek_0tU4bWUh5e1g.roa (hash: NmTTVbO7r1PcNPaADlquWt61ePuzNGoyW8tB4CnfDo8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Apr 2024 04:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:18:8f:91:83:27:d1:91:05:3b:c3:20:ed:99:0f:93:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Validity
            Not Before: Apr 26 04:00:13 2024 GMT
            Not After : Apr 27 04:00:13 2024 GMT
        Subject: CN=0ae4cf92916c0beb1a45307687b52836dffb5044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:4f:c9:35:d3:96:00:a8:a2:ff:fe:e6:7c:
                    9a:51:64:1a:f9:d7:b5:41:13:ac:50:3f:56:78:04:
                    d7:63:d7:f3:2e:3f:b3:9d:59:de:6d:86:b6:62:da:
                    eb:79:0a:e7:04:8f:16:62:d0:4d:dc:e6:d0:d1:74:
                    cb:70:19:bb:c6:88:f6:a3:c1:5a:b9:88:49:10:2c:
                    8d:bf:15:95:e3:32:d7:26:df:f5:a8:4e:5e:5a:4b:
                    6e:ed:fd:37:ba:c1:5a:9c:df:b5:d9:69:dc:b6:c2:
                    f9:79:51:4b:2d:e6:81:b5:55:e0:aa:e9:8c:37:f1:
                    46:33:5b:3c:39:ef:dc:6b:22:4a:43:5d:7d:85:28:
                    61:f4:36:9b:73:f9:dd:7d:58:35:48:36:be:fe:46:
                    b0:be:26:e8:17:c8:cc:4e:9c:a9:05:9b:69:ad:47:
                    46:f3:83:e3:d7:6b:a1:dd:5c:0f:1d:97:48:7f:71:
                    31:0c:88:58:a3:4b:c9:a4:b8:30:10:cd:26:c1:0d:
                    e9:c4:79:f4:e9:44:44:44:b1:cb:06:ec:71:9d:44:
                    39:7d:0e:8f:cf:4c:e0:08:af:da:d4:5f:91:db:42:
                    ab:08:b0:89:a0:41:f2:28:e0:08:23:bd:f8:99:a6:
                    22:cc:31:85:47:30:14:5d:e5:15:a7:2f:06:5b:c0:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E4:CF:92:91:6C:0B:EB:1A:45:30:76:87:B5:28:36:DF:FB:50:44
            X509v3 Authority Key Identifier:
                keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:65:10:07:3e:74:c9:ee:fd:4b:58:26:88:e0:ef:f2:41:91:
         d7:c7:2f:d3:f5:d6:fe:9e:b9:f7:61:3f:22:e1:a5:9d:cd:14:
         63:76:32:68:3b:55:8f:99:db:bc:45:5a:18:8e:23:dc:0a:b6:
         d2:d1:6a:66:ee:d0:7d:8b:c3:84:e7:23:23:36:91:b7:e7:e2:
         9f:74:6c:13:b6:01:6d:f4:36:de:da:0d:6d:2f:7f:ce:24:f7:
         89:63:8a:65:dd:45:2b:7f:c7:bc:e0:94:8a:42:ea:43:62:77:
         aa:2d:97:cd:50:30:f1:c3:89:4f:6a:ee:65:c3:e9:bc:a4:8f:
         6b:ed:c5:33:c2:ad:1d:73:94:91:72:c7:1a:1d:49:52:1c:8b:
         99:e9:c2:de:5c:2c:02:99:b5:66:1d:02:57:da:bb:7c:4e:b2:
         a4:c0:4d:f0:52:54:f0:ca:b7:09:97:7d:b7:66:3f:9a:92:b2:
         9c:4a:95:0d:4d:5b:74:68:65:af:b8:36:04:18:fa:e1:7c:8d:
         2a:ed:60:d1:cd:07:16:6b:bd:65:55:55:3d:cd:70:1d:6f:fe:
         8c:4f:cc:14:a7:0a:21:eb:74:d1:70:64:ec:00:65:f7:33:45:
         d4:4a:31:8b:08:7b:af:1d:c2:71:09:9f:27:57:f7:e2:bf:e4:
         62:ba:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 12:16:59 2024 by rpki-client on console-ams.rpki-client.org